CVE-2014-4303 | BDVDB-2026-62254 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/68045
https://drupal.org/node/2284415
http://secunia.com/advisories/58828
https://drupal.org/node/2269483

Exploit#

No public exploit known

History#

Version 12014-06-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.